Skip to content
OpenAdvisories

Archive

11 June 2019

Vulnerabilities first published on this day (UTC), newest first.

← May 2019 2019 / June /11 July 2019 →
  1. 11
  2. 24
  3. 396
  4. 436
  5. 5167
  6. 657
  7. 779
  8. 8 
  9. 9 
  10. 1023
  11. 1145
  12. 12126
  13. 1345
  14. 1449
  15. 158
  16. 161
  17. 1770
  18. 1850
  19. 1995
  20. 2056
  21. 2125
  22. 22 
  23. 233
  24. 2430
  25. 2526
  26. 2635
  27. 27108
  28. 2829
  29. 2915
  30. 3024
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.4
    CVE-2017-18378

    In NETGEAR ReadyNAS Surveillance before 1.4.3-17 x86 and before 1.1.4-7 ARM, $_GET['uploaddir'] is not escaped and is p…

  • High 8.1
    CVE-2019-3411

    All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfa…

    ZTE ZTE MF920
  • High —
    GHSA-73cw-jxmm-qpgh

    Path Traversal in localhost-now

    All versions of `localhost-now` are vulnerable to path traversal. This vulnerability is a bypass to the path traversal fix introduced in version 1.0.2 Proof of concept: ``` $ curl -v --path-as-is "http://IP:5432/..././..././..././..././..././..././..././.../.…

    localhost-now npm
  • High 7.3
    GHSA-j9f8-8h89-j69x

    Remote Code Execution in node-os-utils

    Versions of `node-os-utils` prior to 1.1.0 are vulnerable to Remote Code Execution. Due to insufficient input validation an attacker could run arbitrary commands on the server thus rendering the package vulnerable to Remote Code Execution. ## Recommendation U…

    node-os-utils npm
  • High —
    GHSA-8w57-jfpm-945m

    Denial of Service in http-proxy-agent

    Versions of `http-proxy-agent` before 2.1.0 are vulnerable to denial of service and uninitialized memory leak when unsanitized options are passed to `Buffer`. An attacker may leverage these unsanitized options to consume system resources. ## Recommendation Up…

    http-proxy-agent npm
  • High 7.1
    CVE-2019-12749

    dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ub…

    dbus dbus dbus dbus Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2019-10337

    Improper Restriction of XML External Entity Reference Jenkins Token Macro Plugin

    An XML external entities (XXE) vulnerability in Jenkins Token Macro Plugin 2.7 and earlier allowed attackers able to control a the content of the input file for the "XML" macro to have Jenkins resolve external entities, resulting in the extraction of secrets …

    Jenkins Project Jenkins Token Macro Plugin org.jenkins-ci.plugins:token-macro Web / CMS Maven